Security Scan: El Pi Taller de Flors

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/64da7298-ff9d-458a-906b-217d4d84569d Domain and IP registration (RDAP)/api/v1/rdap/64da7298-ff9d-458a-906b-217d4d84569d Certificate Transparency/api/v1/ct/elpitallerdeflors.com How often this domain was scanned/api/v1/domain/stats/elpitallerdeflors.com Scan history for this domain/api/v1/domain/history/elpitallerdeflors.com?limit=15

This website contacted 11 IPs in 3 countries across 10 domains to perform 115 HTTP transactions. The main domain is elpitallerdeflors.com and was registered 18 years ago.

Submitted URL: https://elpitallerdeflors.com

Effective URL:

https://www.elpitallerdeflors.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Compromised florist site (El Pi Taller de Flors) serving an injected ClickFix/ClearFake drive-by chain: five analyst-vetted kit signatures, obfuscated loader JS and malware-flagged third-party script hosts. Do not visit.

Risk Factors (6)

CRITICAL ClickFix FakeCAPTCHA kit injecting a Windows LOLBin (msiexec/mshta/wmic/certutil) pasted-command payload

CRITICAL ClearFake Polygon blockchain contract loader retrieving next-stage /js/all.min.js for a ClickFix chain

CRITICAL ErrTraffic/Exvicy WordPress injected loader (base64 blob XOR-decoded and run via new Function)

HIGH macOS and Windows ClickFix fake-verification 'paste into Terminal' lures

Unranked third-party script host cosmical2049.com, reported multi-feed as a PowerShell injector, dynamically contacted via fetch/sendBeacon

Obfuscated JavaScript with dynamic code execution (eval/Function) and obfuscator-usage IDS hunting alerts

Domain age information unavailable

Details

Page Title

El Pi Taller de Flors

Scan Type

public

Favicon Hash

MMH3: 21383077

MD5: d92cc3d24679cdb91955efa16be6da07

Domain Name Analysis

The domain name 'elpitallerdeflors.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'elpitallerdeflors' spans 17 characters split between 6 vowels and 11 consonants. Splitting it apart reveals six words: el, pi, taller, de, flor, s. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

19.45s

Total Load Time

6.5 MB

Total Size

Language Analysis

Primary Language

🇪🇸CA

Code: ca

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:ca

Text Length:4,937 chars

Detector Agreement:50%

Website Classification

Primary Category

news/blog70% confidence

Type: spa

Method: structural

All Detected Categories

news/blog

70%

Detected Features

Articles

OG: article

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	185.66.41.124	Spain	AS19771210dencehispahard, S.L.
10	142.251.14.95Google · CDN	United States	AS15169Google LLC
10	195.58.146.210	Denmark	AS9009M247 Europe SRL
10	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	142.251.151.119Google · CDN	United States	AS15169Google LLC
10	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	142.251.156.119Google · CDN	United States	AS15169Google LLC
10	172.67.191.179Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	142.251.20.94Google · CDN	United States	AS15169Google LLC
10	142.251.14.94Google · CDN	United States	AS15169Google LLC
115	11	-	-